CVE-2009-1942

The CVE-2009-1942 entry concerns a Cross-site scripting (XSS) vulnerability in the Drupal Quiz module (versions 5.x, 6.x-2.x prior to 6.x-2.2, and 6.x-3.x prior to 6.x-3.0). The flaw allows remote authenticated users who have create permissions for quizzes or quiz questions to inject arbitrary we...